add error message for insufficient permissions